security by obscurity: not only unpronouncable domain names, but also unidentifiable in the first place unless the reader is at least equally Weird about internationalized domain names
as soon as you get a tls certificate for that domain, it'll be added to certificate transparency logs, and bots that track those will come knocking (as in, trying to ssh on port 22 with every possible username and otherwise scan for vulnerabilities)